CVE-2023-7357

HighCVSS 8.6

Published: 29/10/2026(UTC)Updated: 30/10/2026(UTC)Translated: 29/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

32th percentile - higher than 32% of all known CVEs

Summary

A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2 (11.19.4.0) release.

Risk Assessment

A remote attacker may execute arbitrary code in the context of the lmadmin service, potentially leading to compromise of the licensing system.

Recommendation

Update FlexNet Publisher to version 2023 R2 (11.19.4.0) or later and restrict access to the lmadmin web interface.

Other vulnerabilities in FlexNet Publisher

CVE-2026-19572Critical
A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, where a hardcoded authentication bypass could allow an unauthenticated user to obtain a privileged administrator session without providing valid credentials.

Original NVD description (English source)

A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2 (11.19.4.0) release.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS